I received: "convert classic admin roles that still need access to your subscription to Azure RBAC roles immediately." What do I do? I don't recognize the subscription xxxxxxxxxxxx

Bobby Visser 20 Reputation points
2025-03-19T08:10:33.17+00:00

I received an email regarding: "... convert classic admin roles that still need access to your subscription to Azure RBAC roles immediately."

I don't recognize the subscription xxxxxxxxxx in the email.

What do I do?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

Accepted answer
  1. Goutam Pratti 6,170 Reputation points Microsoft External Staff Moderator
    2025-03-21T05:36:50.18+00:00

    Hello @Bobby Visser ,

    I understand you received an email regarding: "... convert classic admin roles that still need access to your subscription to Azure RBAC roles immediately." But you do not recognize the subscription id that was associated in the email.

    I hope the suggestion is helpful to find the subscription id which was provided by Achraf Ben Alaya.

    Additionally you can find the subscription id which was associated to the tenant using the azure portal.
    login to portal.azure.com>Subscriptions>Overview and you can check the subscriptionID.
    User's image

    You are receiving this email because starting from April 30, 2025, any Co-Administrator or Service Administrator role assignments will lose access. Microsoft sends this email as a precautionary measure to help organizations avoid unexpected access issues.

    I want you to confirm that it is an active subscription? If it is an active subscription and assigned any classic administrator roles then you need to convert these role assignments to Azure RBAC immediately.

    Steps to Check in Azure Portal:

    1.Navigate to Azure Portal → Subscriptions

    2.Select your subscription → Go to Classic Administrators tab

    3.If no users are listed, it confirms that your subscription has no classic administrator roles

    4.If you manage multiple subscriptions, repeat the same steps for each.

    User's image

    If you see any Co-Administrator or Service Administrator role assignments for your subscription you need to convert these role assignments to Azure RBAC immediately.

    Follow these steps to convert the Co-Administrator or Service Administrator role to the Owner role: Co-Administrator and Service Administrator Retirement Guide

    For additional information you can follow the document: https://learn.microsoft.com/en-gb/azure/role-based-access-control/classic-administrators?tabs=azure-portal#list-classic-administrators

    Hope this Helps Let me know if you any additional Queries Happy to assist you further.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Achraf Ben Alaya 1,316 Reputation points MVP
    2025-03-19T08:21:19.3433333+00:00

    Hey , when you connect to azure portal you don't see that subscription ?

    Could you connect with account and use this commands :

    The az account tenant list command lists all the tenants that are authorized for your account.

    Likewise, the az account subscription list gets all the subscriptions for a tenant.

    You can also explore the Azure PowerShell alternatives for the same: Get-AzTenant and Get-AzSubscription. (It becomes a tad more flexible with PowerShell as you can pass the Tenant ID with the -TenantId parameter while fetching Subscriptions).

    If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.